CVE Catalog

CVE-2023-37630

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.48%

38th percentile - higher than 38% of all known CVEs

Summary

Online Piggery Management System version 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaScript code to 'manage-breed.php', resulting in Persistent XSS.

Risk Assessment

An attacker can exploit this vulnerability to inject malicious code, potentially leading to user data theft or session hijacking. The organization is at risk of losing trust and incurring financial losses.

Recommendation

It is recommended to implement input filtering and validation in the application to prevent the injection of malicious code. The system should also be updated to the latest version if available.

Original NVD description (English source)

Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaScript code to "manage-breed.php" resulting in Persistent XSS.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS